Anonymous leaks 90,000+ emails from compromised military contractor Booz Allen Hamilton

Anonymous leaks 90,000+ emails from compromised military contractor Booz Allen Hamilton

Summary: The latest victim of the Anonymous movement is the military contractor Booz Allen Hamilton

SHARE:
5

According to a recently published torrent file, the latest victim of the Anonymous movement is the military contractor Booz Allen Hamilton. Hacktivists from the movement have published over 90,000 miitary emails and password hashes belonging to military and government representatives:

We infiltrated a server on their network that basically had no security measures in place. We were able to run our own application, which turned out to be a shell and began plundering some booty. Most shiny is probably a list of roughly 90,000 military emails and password hashes (md5, non-salted of course!).

We also added the complete sqldump, compressed ~50mb, for a good measure.We also were able to access their svn, grabbing 4gb of source code. But this was deemed insignificant and a waste of valuable space, so we merely grabbed it, and wiped it from their system. Additionally we found some related datas on different servers we got access toafter finding credentials in the Booz Allen System. We added anything which could be interesting.

Anonymous have also included a penetration testing invoice in the torrent's release notes, emphasizing on the security practices applied to the hacked network.

Although the leak is embarrassing for Booz Allen Hamilton, the post-hack effect could easily set up the foundations for successful spear phishing attacks targeting unpublished U.S military and government emails.

The Anonymous community is thriving. Who's next on their targets list?

TalkBack.

Topics: Security, Collaboration

Dancho Danchev

About Dancho Danchev

Dancho Danchev is an independent security consultant and cyber threats analyst, with extensive experience in open source intelligence gathering, malware and cybercrime incident response.

Kick off your day with ZDNet's daily email newsletter. It's the freshest tech news and opinion, served hot. Get it.

Talkback

5 comments
Log in or register to join the discussion
  • Don't call them hactivists

    The term implies that politically motivated cracking is just another form of political activism, which it is not. By that measure, the idiots who try to disrupt opposition meetings are activists too.

    The danger I see is that "hactivism" might become just another tool in the toolbox, with Democratic "hactivists" burglarizing Republican sites and vice versa.
    John L. Ries
    • RE: Anonymous leaks 90,000 emails from compromised military contractor Booz Allen Hamilton

      @John L. Ries They are indeed hactivists you kool-aid drinking twit
      Bodazapha
      • RE: Anonymous leaks 90,000 emails from compromised military contractor Booz Allen Hamilton

        @Bodazapha
        They are NOT hackivist they are criminals. Coward criminals i might add just like the terrorists
        Stan57
      • RE: Anonymous leaks 90,000 emails from compromised military contractor Booz Allen Hamilton

        @Bodazapha <a href="http://cupu.web.id/pulauweb-web-hosting-murah-indonesia/">Pulauweb Web Hosting Murah Indonesia</a>
        <a href="http://cupu.web.id/blogger-nusantara-blogpreneur-indonesia/">Blogger Nusantara Blogpreneur Indonesia</a>
        upinson
  • 90k accounts in searchable list

    For military personnel to check if your account was leaked, http://dazzlepod.com/boozallen/
    ayeowch@...